CVE-2025-11509 – code-projects E-Commerce Website product_add.php sql injection

CVE ID : CVE-2025-11509

Published : Oct. 8, 2025, 11:15 p.m. | 1 hour, 22 minutes ago

Description : A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…